GCIA: GIAC Certified Intrusion AnalystDemo

By GIAC · Question Mode

QuestionQ78

Concepts of TCP/IP and the Link Layer

This Windows-based tool detects wireless LANs that use the IEEE 802.11a, 802.11b, and 802.11g standards. Its main features include:

  • Displaying a wireless network’s signal strength, MAC address, SSID, channel details, and similar information.
  • It is commonly used for the following purposes:
Choose four
  • A War driving
  • B Detecting unauthorized access points
  • C Detecting causes of interference on a WLAN
  • D WEP ICV error tracking
  • E Making Graphs and Alarms on 802.11 Data, including Signal Strength
Explanation

NetStumbler is the classic Windows active WLAN scanner that beacons out probe requests to enumerate 802.11a/b/g networks in range, reporting SSID, MAC address, channel, and signal-to-noise ratio for each detected access point. Because it logs signal strength continuously (optionally with GPS coordinates), it is widely used for war driving, for spotting rogue/unauthorized access points introduced onto a network, for troubleshooting coverage and interference problems, and for generating strength graphs and alerts, but it does not perform WEP ICV (Integrity Check Value) error analysis, which requires packet-level cryptographic inspection performed by dedicated wireless IDS tools rather than a beacon-based scanner like NetStumbler.

Community Discussion

No comments yet. Be the first to start the discussion!